Extracting domain from email address

Trying to extract domain from an email address to use in checks with VirusTotal and ThreatCrowd.
I’m guessing the best way is to use a pattern match in the workflow, but I’m just not quite figuring out the pattern to extract the domain and set a domain variable in the output.

I got some help from support and figured this out.

When input is an email address, this pattern extracts the domain and outputs as domain variable.


Also got help from this Developing and Debugging Regex for the Pattern Match Step

1 Like